CVE-2026-12162

Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social…

Medium · published June 15, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Improper host validation in the social login autofill feature in

Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to

disclose stored social login credentials via a crafted web entry

pointing to a provider lookalike domain.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00147 · 3.6th percentile
Published
2026-06-15T23:56Z
EPSS history
Timeline
  • 15 JUN 23:56Z
    Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social…
    cvelistv5